Privacy Policy — MDS Meta Ads AI Operator

Last updated: 28 September 2026

MDS Meta Ads AI Operator ("the app") is operated by Master Business Centre / Master Digital Solution ("MDS", "we"). The app helps us and the businesses we work with to read, analyse and, with explicit approval, manage their own Meta (Facebook and Instagram) advertising.

1. Information we access

When you connect a Meta account, the app accesses only the following through the Meta Marketing API, with the permissions you grant (ads_read, ads_management, business_management, pages_show_list, pages_read_engagement, pages_manage_ads):

• Ad accounts: name, ID, currency and time zone.
• Advertising objects: campaigns, ad sets, ads and ad creatives, including ad text and creative thumbnails.
• Performance data: aggregated insights such as spend, impressions, clicks and messaging or lead results, including by placement.
• Pages: the list of Facebook Pages that can be used for advertising.

We do not collect the personal data of people who see or respond to ads. We do not read WhatsApp or Messenger conversations.

2. How we use it

• To show performance dashboards, target tracking and reports.
• To produce AI-assisted analysis and pre-launch reviews of ads.
• To create or change ads only after an authorised person explicitly approves each change inside the app. Every change is recorded in an audit log.

3. AI processing

Aggregated performance figures, ad text and, for pre-launch review, the ad image are sent to our AI provider (Anthropic) to generate analysis. Before anything is sent:

• Phone numbers and WhatsApp links are removed from the text.
• Access tokens are never sent.

4. Storage and security

• Meta access tokens are encrypted at rest (AES-256-GCM). They are never shown in the app interface.
• Data is stored only as long as needed to provide the service.
• Access to the app is restricted to authorised users.

5. Sharing

We do not sell data. We share data only with the service providers needed to run the app (hosting and AI processing), or where required by law.

6. Your choices and data deletion

You can disconnect your Meta account in the app at any time. Disconnecting deletes the stored token.

To request deletion of all data related to your account, see our Data Deletion Instructions or email cdmsazalee@gmail.com.

7. Malaysian law

We handle personal data in line with the Personal Data Protection Act 2010 (Malaysia).

8. Contact

Questions about this policy: cdmsazalee@gmail.com